$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa File: 44933cdf-f968-308a-928b-ac0b352a324d.roa (raw, json) Hash identifier: a/tBSbhk39dYs+i+VcFj5vDyHPCj9L2P/JhH2iPRPv0= Subject key identifier: 3E:66:75:D8:06:C9:E5:E1:B6:2C:CC:2F:4D:DB:CE:6F:EF:5B:A7:BC Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F4328584F71EDA6AB1C731E9A49128A00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 3356 IP address blocks: 192.46.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a6:ab:1c:73:1e:9a:49:12:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=657c26a7-2bf1-48dd-9f26-b463347438cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:d3:62:41:39:15:3f:60:7a:3f:3b:00:f9: 99:d9:ce:fe:2c:e2:29:e9:56:87:53:ad:f9:49:9f: 8c:68:79:46:81:34:ad:c0:cc:38:96:54:5a:70:12: 95:59:17:0e:1b:5a:03:98:07:5b:84:bd:98:e0:80: fb:c9:e9:70:bf:65:19:33:65:4f:77:00:00:dc:73: 19:1c:28:b2:fb:e6:bf:e8:dd:27:04:3c:2c:ca:23: fb:e1:f9:66:97:68:90:14:85:7f:dc:39:ff:99:fc: 43:71:f7:47:99:04:80:0b:d7:97:32:48:5a:4f:d3: df:9e:d7:84:c0:6b:c0:84:82:74:72:42:b2:b5:67: 5c:a8:5c:b1:a7:a2:3f:f0:4e:6d:cf:c0:c9:d7:cc: 81:31:9e:83:70:c5:67:b0:f4:a9:a0:c2:9b:a6:c5: e4:25:93:5b:96:7f:e3:7f:08:0c:06:27:2b:b3:d1: b4:56:81:2c:8f:34:79:9c:e0:18:2c:c5:a4:32:8c: f9:eb:4d:a4:e8:96:df:f5:e2:95:f6:44:79:ed:af: f0:2e:d0:7b:0d:b7:e9:5c:0a:f0:4f:82:fe:ef:7b: 94:df:5e:c5:3f:a7:ba:4d:8c:3b:61:98:68:4e:23: 58:6b:3a:aa:91:73:a5:6a:eb:87:d9:04:21:87:74: d9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:66:75:D8:06:C9:E5:E1:B6:2C:CC:2F:4D:DB:CE:6F:EF:5B:A7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/44933cdf-f968-308a-928b-ac0b352a324d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 192.46.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c9:ee:e8:d3:8a:ab:40:ee:a7:63:f4:ff:c4:36:74:65:90: 16:2c:69:00:b7:12:19:5c:25:81:98:23:c7:32:51:9f:24:6a: e4:04:fc:c9:9d:73:5b:70:4a:1f:4c:fd:27:f5:f9:fe:ca:79: a2:4f:2f:ea:a1:35:32:dc:11:83:ac:1a:02:52:de:4c:4d:72: a6:3c:b5:64:f7:5c:25:1f:e9:56:92:60:eb:51:ef:d2:2f:81: 27:99:e7:78:17:d8:3c:c8:98:68:eb:a3:20:d2:d6:2c:e5:32: f3:2b:f0:3b:3b:8b:5f:46:2f:62:d5:0f:9a:d5:ea:cb:27:d4: 8e:e5:b3:83:c7:06:a5:33:e8:cd:1d:52:9f:a5:9e:02:42:01: 77:71:dc:1a:e0:d9:04:43:84:26:a6:27:14:df:6b:4c:fe:56: f8:0f:92:ae:f7:5e:61:93:9d:bf:e1:2d:e0:b6:53:5b:b9:b5: 72:e0:77:5b:7d:ab:d3:7b:8a:58:56:2a:0f:74:ac:eb:9f:9c: 7d:de:d9:7e:cf:9f:4d:d6:7e:50:cc:42:bf:16:f5:92:fd:e9: 94:ff:4d:33:6e:6e:af:a5:eb:7e:97:c5:b4:d9:0b:d5:ca:91: 28:9a:51:53:b4:10:e4:41:2b:37:1e:29:d7:52:f1:5e:e0:21: 29:3e:19:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aarHHMemkkSigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NjU3YzI2YTctMmJmMS00OGRkLTlmMjYtYjQ2MzM0NzQzOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr/TYkE5FT9gej87APmZ2c7+LOIp6VaHU635 SZ+MaHlGgTStwMw4llRacBKVWRcOG1oDmAdbhL2Y4ID7yelwv2UZM2VPdwAA3HMZ HCiy++a/6N0nBDwsyiP74flml2iQFIV/3Dn/mfxDcfdHmQSAC9eXMkhaT9PfnteE wGvAhIJ0ckKytWdcqFyxp6I/8E5tz8DJ18yBMZ6DcMVnsPSpoMKbpsXkJZNbln/j fwgMBicrs9G0VoEsjzR5nOAYLMWkMoz5602k6Jbf9eKV9kR57a/wLtB7DbfpXArw T4L+73uU317FP6e6TYw7YZhoTiNYazqqkXOlauuH2QQhh3TZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5mddgGyeXhtizML03bzm/vW6e8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvNDQ5MzNjZGYtZjk2OC0z MDhhLTkyOGItYWMwYjM1MmEzMjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwC56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrJ7ujTiqtA7qdj9P/ENnRlkBYsaQC3EhlcJYGYI8cyUZ8kauQE/Mmd c1twSh9M/Sf1+f7KeaJPL+qhNTLcEYOsGgJS3kxNcqY8tWT3XCUf6VaSYOtR79Iv gSeZ53gX2DzImGjroyDS1izlMvMr8Ds7i19GL2LVD5rV6ssn1I7ls4PHBqUz6M0d Up+lngJCAXdx3Brg2QRDhCamJxTfa0z+VvgPkq73XmGTnb/hLeC2U1u5tXLgd1t9 q9N7ilhWKg90rOufnH3e2X7Pn03WflDMQr8W9ZL96ZT/TTNubq+l636XxbTZC9XK kSiaUVO0EORBKzceKddS8V7gISk+GS8= -----END CERTIFICATE-----Generated at Mon Oct 12 23:23:04 2026 by rpki-client